es.net
- Lawrence Berkeley National Laboratory -
Issued by InCommon RSA Server CA
About this certificate
This digital certificate with serial number d0:d1:b2:14:5f:a4:1d:f0:da:95:a6:bb:57:9c:46:d8 was issued on by Internet2.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Lawrence Berkeley National Laboratory
Organization:
Lawrence Berkeley National Laboratory
Organization unit: ESnet
Organization unit: ESnet
State / Province:
California
Locality: Berkeley
Country: US
Locality: Berkeley
Country: US
Internet2
Organization:
Internet2
Organization unit: InCommon
Organization unit: InCommon
State / Province:
MI
Locality: Ann Arbor
Country: US
Locality: Ann Arbor
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): d0:d1:b2:14:5f:a4:1d:f0:da:95:a6:bb:57:9c:46:d8Serial Number (int): 277568225049768461980018796971593320152
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: f3:30:26:e5:a4:ef:e2:a5:c3:7c:2b:39:32:9e:7a:dd:80:3b:15:df
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38
Fingerprint (sha1): fe:54:a4:3e:38:5e:1f:8b:0b:24:6f:41:69:c2:7b:f2:95:ae:5d:0d
Fingerprint (sha256): 22:f4:7d:40:4a:b5:de:af:0f:49:71:a7:c0:2a:a7:4a:f5:66:09:75:7a:d0:0f:90:2b:3c:3a:78:14:53:1d:1b
Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
Check the revocation status for certificate es.net
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for es.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
es.net
fasterdata.es.net
www.es.net
www.fasterdata.es.net
fasterdata.es.net
www.es.net
www.fasterdata.es.net
Other certificates including the domain name es.net
(limited to 100 certificates)
vapor.es.net
repo.es.net
mcusd1.es.net
if.es.net
enrollment.es.net
grafana.es.net
netbeam-api-develop.es.net
panorama-east.es.net
dna-east.es.net
my.es.net
nsmdb-west.es.net
cement.es.net
listserv.es.net
ninfo-west.es.net
software.es.net
nsi-aggr-west.es.net
tls.automattic.com
graphite.es.net
prometheus-west.es.net
dna-west.es.net
tls.automattic.com
netbeam.es.net
blue-mcp-east1.es.net
akips-test.es.net
packetdesign.es.net
mcusd2.es.net
www.es.net
es.net
eng-wiki.es.net
netbeam-core-api.es.net
netbeam-api.es.net
www.es.net
netbeam-core-api-develop.es.net
splunk-west1.es.net
vcenter-dev-west1.es.net
software.es.net
tls.automattic.com
sysmon.es.net
if.es.net
influxdb-poc.es.net
arbor.es.net
sysinfo.es.net
netlab-dna-west.es.net
nso-netlab.es.net
oscars-pss.es.net
thulite.es.net
vapor.es.net
bhr-west.es.net
www-eng.es.net
arista-bnl.es.net
vapor.es.net
sense-nrm.es.net
oscars-dev2.es.net
spectrum.es.net
stats.es.net
lighthouse.es.net
artemis.es.net
fw1-west-mgt.es.net
stats.es.net
hardware-inventory-east.es.net
omg.es.net
wiki.es.net
nsi-aggr-west.es.net
software.es.net
prometheus-poc.es.net
inflxudb-poc.es.net
wiki-east.es.net
cement-east.es.net
netbeam-core-api.es.net
idp.es.net
panorama.es.net
my.es.net
vcenter-west1.es.net
graphite.es.net
downloads.es.net
vcenter-east1.es.net
grafana.es.net
idp.es.net
stats.es.net
www.es.net
stats.es.net
nsmdb-east.es.net
arista-lbl.es.net
waikiki.es.net
my.es.net
nsi-aggr-west.es.net
omg.es.net
ps-dev-el7-1.es.net
gab.es.net
scan-west.es.net
software.es.net
bhr-lbl.es.net
software.es.net
mcuhd2.es.net
downloads.es.net
software.es.net
esdb.es.net
software.es.net
arbor.es.net
packetdesign.es.net
repo.es.net
mcusd1.es.net
if.es.net
enrollment.es.net
grafana.es.net
netbeam-api-develop.es.net
panorama-east.es.net
dna-east.es.net
my.es.net
nsmdb-west.es.net
cement.es.net
listserv.es.net
ninfo-west.es.net
software.es.net
nsi-aggr-west.es.net
tls.automattic.com
graphite.es.net
prometheus-west.es.net
dna-west.es.net
tls.automattic.com
netbeam.es.net
blue-mcp-east1.es.net
akips-test.es.net
packetdesign.es.net
mcusd2.es.net
www.es.net
es.net
eng-wiki.es.net
netbeam-core-api.es.net
netbeam-api.es.net
www.es.net
netbeam-core-api-develop.es.net
splunk-west1.es.net
vcenter-dev-west1.es.net
software.es.net
tls.automattic.com
sysmon.es.net
if.es.net
influxdb-poc.es.net
arbor.es.net
sysinfo.es.net
netlab-dna-west.es.net
nso-netlab.es.net
oscars-pss.es.net
thulite.es.net
vapor.es.net
bhr-west.es.net
www-eng.es.net
arista-bnl.es.net
vapor.es.net
sense-nrm.es.net
oscars-dev2.es.net
spectrum.es.net
stats.es.net
lighthouse.es.net
artemis.es.net
fw1-west-mgt.es.net
stats.es.net
hardware-inventory-east.es.net
omg.es.net
wiki.es.net
nsi-aggr-west.es.net
software.es.net
prometheus-poc.es.net
inflxudb-poc.es.net
wiki-east.es.net
cement-east.es.net
netbeam-core-api.es.net
idp.es.net
panorama.es.net
my.es.net
vcenter-west1.es.net
graphite.es.net
downloads.es.net
vcenter-east1.es.net
grafana.es.net
idp.es.net
stats.es.net
www.es.net
stats.es.net
nsmdb-east.es.net
arista-lbl.es.net
waikiki.es.net
my.es.net
nsi-aggr-west.es.net
omg.es.net
ps-dev-el7-1.es.net
gab.es.net
scan-west.es.net
software.es.net
bhr-lbl.es.net
software.es.net
mcuhd2.es.net
downloads.es.net
software.es.net
esdb.es.net
software.es.net
arbor.es.net
packetdesign.es.net
Certificate
The complete raw certificate details for es.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIRANDRshRfpB3w2pWmu1ecRtgwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMjIwNTA2MDAwMDAwWhcNMjMwNTA2 MjM1OTU5WjCBhjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExETAP BgNVBAcTCEJlcmtlbGV5MS4wLAYDVQQKEyVMYXdyZW5jZSBCZXJrZWxleSBOYXRp b25hbCBMYWJvcmF0b3J5MQ4wDAYDVQQLEwVFU25ldDEPMA0GA1UEAxMGZXMubmV0 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt1lFYOLnu6inI+kYL4v Pw3WsadH+xXcsnixfg9G0hjjqWd/WOK+5LVh9BzAvsYVJAzIc8ahUQvZeTIkd9EY cEruwm3RlZe/hRFUeE21jndG4TFWct1TeL+BJ2S9usQWsQdsmZzakheP3QMn2/0K Prs1BZXbxO8wIabg9yV2AYgV/kZpcLvtHV8H+QmVYsx0bPJc66++SEShivpAI6Yx SOZmOWicGzlahIno3S2bATxXf49uJd9SrZwfV5wpaA8AU0B/RsneL+l19UiL4gwR xyBVjsxTHhq9Zit/2rz8Sp6tZZjfeRshGXWuXj4XvsyLK0d8GrngL6ApJcbpZrau cQIDAQABo4IDczCCA28wHwYDVR0jBBgwFoAUHgWjd49sluJbh0umtIascQAM5zgw HQYDVR0OBBYEFPMwJuWk7+Klw3wrOTKeet2AOxXfMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBnBgNV HSAEYDBeMFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRodHRwczovL3d3 dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wucGRmMAgGBmeB DAECAjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmluY29tbW9uLXJzYS5v cmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5jcmwwdQYIKwYBBQUHAQEEaTBnMD4GCCsG AQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vSW5Db21tb25SU0FTZXJ2 ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNv bTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYArfe++nz/EMiLnT2cHj4YarRn KV3PsQwkyoWGNOvcgooAAAGAlr/PiAAABAMARzBFAiEA8zePjOWY7Tb6+MduyCCj RwcvNhU4tZfWnWJM8sE0j94CICY/GcjZmpQslAZlrpZQj9fFk/2zrMVxwE1RAAgq ahfDAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGAlr/PigAA BAMASDBGAiEA/0q/wmlT4s95Fpqsd0GpWfyAW7nm6+yJPd0XcvQBXP0CIQDaPDf4 9A960mCsdBuPAYkj/T0n3OgMd7Hj/dtj4YkZ9AB2AOg+0No+9QY1MudXKLyJa8kD 08vREWvs62nhd31tBr1uAAABgJa/z2kAAAQDAEcwRQIgMo7pIsgm4ZZi2RQGtig4 6+XjwYvmDuRI1iUUcWyc4XMCIQD1Wo9CIKYFuKfZBoGsTzsXtMACgigjNWHyy/P/ 9SUq+DBHBgNVHREEQDA+ggZlcy5uZXSCEWZhc3RlcmRhdGEuZXMubmV0ggp3d3cu ZXMubmV0ghV3d3cuZmFzdGVyZGF0YS5lcy5uZXQwDQYJKoZIhvcNAQELBQADggEB AF7H4vkPZ5AePZ4iPr0qC5AxmXJY6ocvcYkl/wnGwvqVu5kBnHTeXldwX/uiuonk 5/fWYy29UpKDuv0rQ7hTXL+NP9Swbhb7XT2foPN7vKd6OB05QyX6TqR3OoyK4Zo5 kk+0nYtg6GQr/lLQgwRwFV7wWzhJIw2nuNIfkbE81mi7fKQDQymyfqSXMtYdpS2m c4NhVhCqciMlVSfb9bliVtqK5G/BXPYmO73chmMLsTOeBiCHSO2B+gr559hRAt7J QnJBmo0QDK7cYMJB2aeuN1QhvOMcXIES9UBOMseF6YWC7jVLjijTevGW0XDdJFvE x/PXbCuq9KvXHuWYAqaXkNM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt1lFYOLnu6inI+kYL4v Pw3WsadH+xXcsnixfg9G0hjjqWd/WOK+5LVh9BzAvsYVJAzIc8ahUQvZeTIkd9EY cEruwm3RlZe/hRFUeE21jndG4TFWct1TeL+BJ2S9usQWsQdsmZzakheP3QMn2/0K Prs1BZXbxO8wIabg9yV2AYgV/kZpcLvtHV8H+QmVYsx0bPJc66++SEShivpAI6Yx SOZmOWicGzlahIno3S2bATxXf49uJd9SrZwfV5wpaA8AU0B/RsneL+l19UiL4gwR xyBVjsxTHhq9Zit/2rz8Sp6tZZjfeRshGXWuXj4XvsyLK0d8GrngL6ApJcbpZrau cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277568225049768461980018796971593320152 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berkeley' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lawrence Berkeley National Laboratory' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ESnet' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'es.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23084545378020602307096660167794699795073183068255701476746996611732904280945910132621591181489185179687165628314881591705479671288577216410470109305927798570975998242805535576036361767969632797506618368886354865466906293724235262753114490115686281701799648755425729050814387496425479650715069143904032603756669265440456440831126856150971057448458927607110430075718162577031364752584532960660409329587337471116604283856262987333713293801171573224939882025508841993268691248263848663352306878870575181036463038282510716951120646290104533933931765246403291457260828733612423833236940206958616003135747995971274591874673 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f33026e5a4efe2a5c37c2b39329e7add803b15df . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasterdata.es.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.es.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasterdata.es.net' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005ec7e2f90f67901e3d9e223ebd2a0b9031997258ea872f718925ff09c6c2fa95bb99019c74de5e57705ffba2ba89e4e7f7d6632dbd529283bafd2b43b8535cbf8d3fd4b06e16fb5d3d9fa0f37bbca77a381d394325fa4ea4773a8c8ae19a39924fb49d8b60e8642bfe52d0830470155ef05b3849230da7b8d21f91b13cd668bb7ca4034329b27ea49732d61da52da67383615610aa7223255527dbf5b96256da8ae46fc15cf6263bbddc86630bb1339e06208748ed81fa0af9e7d85102dec94272419a8d100caedc60c241d9a7ae375421bce31c5c8112f5404e32c785e98582ee354b8e28d37af196d170dd245bc4c7f3d76c2baaf4abd71ee59802a69790d3